Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft
File:                     5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft (raw, json)
Hash identifier:          YcXMt22h9fHjsoP6Kj6B0hjN75xhEtqLh50AbMOh+Ek=
Subject key identifier:   B2:5A:D1:47:A7:E1:4D:54:20:E2:E7:B2:CE:3B:49:C5:7E:DE:83:91
Authority key identifier: E5:08:73:AF:47:5E:D6:EE:B7:CB:96:3C:65:E8:D9:80:5B:8B:B5:69
Certificate issuer:       /CN=A916148F/serialNumber=E50873AF475ED6EEB7CB963C65E8D9805B8BB569
Certificate serial:       033F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qhzr0de1u63y5Y8ZejZgFuLtWk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft
Manifest number:          033A
Signing time:             Wed 13 May 2026 01:08:55 +0000
Manifest this update:     Wed 13 May 2026 01:08:54 +0000
Manifest next update:     Wed 20 May 2026 01:08:54 +0000
Files and hashes:         1: 5Qhzr0de1u63y5Y8ZejZgFuLtWk.crl (hash: tUENS1WiHNwvjCCwK76PRjwnQTJ8W8WVUScv0RPz0rE=)
                          2: E757164C074511EDB229157DC4F9AE02.roa (hash: Bjnc4EakQapdCARIIa5nan+FIy1tiCXArToRM95Qc7Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.crl
                          rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qhzr0de1u63y5Y8ZejZgFuLtWk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 01:08:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 831 (0x33f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916148F, serialNumber=E50873AF475ED6EEB7CB963C65E8D9805B8BB569
        Validity
            Not Before: May 13 01:08:54 2026 GMT
            Not After : May 20 01:08:54 2026 GMT
        Subject: CN=6a03cf27-8614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:84:d8:af:0d:06:b1:34:7b:ae:27:25:38:eb:
                    24:51:85:5f:e3:ac:ec:cc:c4:97:f5:1f:f9:a1:47:
                    99:2e:1d:4b:7a:74:0c:37:3d:5a:9f:b1:aa:4c:16:
                    bb:c9:72:f6:f7:79:5e:11:60:d3:0f:18:3c:32:b7:
                    40:4c:94:02:7f:2d:5d:b9:0c:d1:d3:cf:a8:a8:50:
                    96:7d:ff:7b:6a:a9:14:9a:a7:69:f9:7c:06:07:18:
                    44:76:df:06:d7:01:6b:23:3f:3e:29:c4:cd:4c:74:
                    05:de:79:8e:a8:4c:35:c9:56:8e:83:db:d5:ea:38:
                    f8:c7:70:1c:7a:d5:2e:5b:75:97:99:41:14:1f:a3:
                    4d:bc:c1:49:6e:90:8a:b4:c8:5c:dc:bb:04:46:4e:
                    ce:91:9a:b4:97:dd:fe:fa:bb:8b:3d:71:c8:b6:38:
                    18:8e:4d:4e:f8:53:c5:67:5e:96:eb:58:12:e9:a3:
                    f3:02:3c:a2:e4:88:7e:84:fe:f9:0d:5d:a4:33:b7:
                    e6:79:ae:d4:4c:36:b3:bc:a0:1e:3f:45:70:04:61:
                    f8:76:5b:8f:4f:83:60:b4:98:44:7f:6b:e3:5e:c2:
                    f3:49:64:1b:54:b0:8e:04:df:ff:82:bd:39:ab:20:
                    7d:ed:57:81:e8:76:17:c5:a4:4f:06:b0:25:20:66:
                    d0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:5A:D1:47:A7:E1:4D:54:20:E2:E7:B2:CE:3B:49:C5:7E:DE:83:91
            X509v3 Authority Key Identifier:
                keyid:E5:08:73:AF:47:5E:D6:EE:B7:CB:96:3C:65:E8:D9:80:5B:8B:B5:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Qhzr0de1u63y5Y8ZejZgFuLtWk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916148F/68848268074111EDAB19D447C4F9AE02/5Qhzr0de1u63y5Y8ZejZgFuLtWk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:de:01:25:35:99:d1:c3:b0:81:68:ef:33:f9:d6:40:0e:59:
         db:c4:c0:ae:99:d4:cd:eb:9e:9b:75:6d:29:0a:e2:d6:92:56:
         a1:42:d9:ab:5d:11:08:35:d2:c6:70:4c:80:97:53:43:85:ad:
         14:7b:c4:4c:d0:da:21:39:3c:43:42:de:20:52:fb:22:49:1a:
         ce:67:6f:01:56:d7:c5:bc:b5:64:90:e5:42:25:ef:6d:f7:ae:
         bf:97:8a:91:30:20:98:8f:dd:0f:10:de:03:a5:aa:3c:d2:c4:
         97:f4:40:ff:62:0b:bc:e9:98:ab:f0:b7:53:13:25:6d:3a:6a:
         89:ff:27:bd:0c:47:36:3d:f0:48:e0:bb:d7:83:ca:d0:6b:d3:
         9a:56:b6:79:73:e4:dc:d9:24:aa:fa:cc:ea:d6:c2:b6:b3:1a:
         2d:d0:39:ab:b8:0b:d0:b1:95:14:c2:63:19:b0:cd:b2:b2:08:
         c6:ad:04:95:c3:6c:cc:a7:dc:bf:de:9f:ee:58:7b:74:5d:0e:
         6a:64:bb:ac:34:0a:a9:4b:af:9c:0e:7d:f6:00:8f:cf:93:2d:
         6b:bc:87:78:75:d5:ea:6f:77:11:84:53:ab:46:f1:3a:ef:bf:
         cf:51:ed:cd:d9:4a:16:b4:f2:3e:7f:ca:37:19:c4:bb:51:c8:
         c8:71:f5:37
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAz8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjE0OEYxMTAvBgNVBAUTKEU1MDg3M0FGNDc1RUQ2RUVCN0NCOTYzQzY1RThEOTgw
NUI4QkI1NjkwHhcNMjYwNTEzMDEwODU0WhcNMjYwNTIwMDEwODU0WjAYMRYwFAYD
VQQDEw02YTAzY2YyNy04NjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt4TYrw0GsTR7riclOOskUYVf46zszMSX9R/5oUeZLh1LenQMNz1an7GqTBa7
yXL293leEWDTDxg8MrdATJQCfy1duQzR08+oqFCWff97aqkUmqdp+XwGBxhEdt8G
1wFrIz8+KcTNTHQF3nmOqEw1yVaOg9vV6jj4x3AcetUuW3WXmUEUH6NNvMFJbpCK
tMhc3LsERk7OkZq0l93++ruLPXHItjgYjk1O+FPFZ16W61gS6aPzAjyi5Ih+hP75
DV2kM7fmea7UTDazvKAeP0VwBGH4dluPT4NgtJhEf2vjXsLzSWQbVLCOBN//gr05
qyB97VeB6HYXxaRPBrAlIGbQ6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLJa0Uen
4U1UIOLnss47ScV+3oORMB8GA1UdIwQYMBaAFOUIc69HXtbut8uWPGXo2YBbi7Vp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTQ4Ri82ODg0ODI2ODA3
NDExMUVEQUIxOUQ0NDdDNEY5QUUwMi81UWh6cjBkZTF1NjN5NVk4WmVqWmdGdUx0
V2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVRaHpyMGRlMXU2M3k1WThaZWpaZ0Z1THRXay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MTQ4Ri82ODg0ODI2ODA3NDExMUVEQUIxOUQ0NDdDNEY5QUUwMi81UWh6cjBkZTF1
NjN5NVk4WmVqWmdGdUx0V2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALd4BJTWZ0cOwgWjvM/nWQA5Z28TArpnUzeuem3VtKQri1pJWoULZq10RCDXS
xnBMgJdTQ4WtFHvETNDaITk8Q0LeIFL7IkkazmdvAVbXxby1ZJDlQiXvbfeuv5eK
kTAgmI/dDxDeA6WqPNLEl/RA/2ILvOmYq/C3UxMlbTpqif8nvQxHNj3wSOC714PK
0GvTmla2eXPk3NkkqvrM6tbCtrMaLdA5q7gL0LGVFMJjGbDNsrIIxq0ElcNszKfc
v96f7lh7dF0OamS7rDQKqUuvnA599gCPz5Mta7yHeHXV6m93EYRTq0bxOu+/z1Ht
zdlKFrTyPn/KNxnEu1HIyHH1Nw==
-----END CERTIFICATE-----
Generated at Wed May 13 10:25:06 2026 by rpki-client